Skip to main content
Glama
F6 XDR MCP Server

F6 XDR MCP Server

Official
by F6-Security

Related Servers

Alternatives to F6 XDR MCP Server

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      F
      maintenance
      Enables AI assistants to interact with Rapid7 InsightIDR SIEM for investigating incidents, searching logs with LEQL, managing alerts and assets, analyzing user behavior, and handling threat intelligence.
      26
      56 npm
      4
      MIT
    • F
      license
      Not graded
      quality
      C
      maintenance
      Enables interaction with Palo Alto Networks Cortex XDR via natural language, covering incidents, alerts, endpoints, vulnerabilities, XQL queries, threat hunting, IOCs, and policies.
      -
    • A
      license
      B
      quality
      C
      maintenance
      Enables AI assistants to drive the UTMStack SIEM/XDR platform for triaging alerts, searching logs, running SQL, managing incidents, inspecting agents, creating/deleting correlation rules, managing data filters, and running commands on endpoints.
      44
      MIT
    • F
      license
      Not graded
      quality
      D
      maintenance
      Enables interaction with F5 devices through the iControl REST API to manage objects like virtual servers, pools, iRules, and profiles. It provides comprehensive tools for listing, creating, updating, and deleting F5 configurations via natural language interfaces.
      -
    • A
      license
      Not graded
      quality
      A
      maintenance
      Connects AI agents with the CrowdStrike Falcon platform to enable intelligent security analysis, providing programmatic access to detections, incidents, threat intelligence, vulnerabilities, and other security capabilities for advanced security operations and automation.
      277
      MIT
    • A
      license
      A
      quality
      C
      maintenance
      Enables AI agents to interact with IBM QRadar SIEM, including querying and updating offenses, running AQL searches, managing threat intelligence reference sets, and checking console connectivity.
      27
      MIT

    TDQS

    A3.6/5.0

    Scored across 7 tools

    Disambiguation3/5

    The search/count pair and the artifact tools are clearly distinct, but the metadata trio — xdr_get_mapping, xdr_get_filters, and xdr_get_suggestions — have overlapping purposes (all answer 'what can I search/filter on?'), and xdr_get_filters has a one-line description that gives no guidance on when to use it instead of get_mapping. xdr_get_suggestions and xdr_search could also be confused since both can return matching values.

    Naming Consistency4/5

    All tools share the xdr_ prefix and snake_case, with a clear verb-first structure (search, count, get_*, list_*). The only deviation is that xdr_search and xdr_count drop the noun compared to the get_/list_ tools, which is minor and still readable.

    Tool Count5/5

    Seven tools is a well-scoped set for a search-and-inspect server: one per query primitive plus two for the artifact workflow. Each tool has a distinct role, and nothing feels padded or missing from the count itself.

    Completeness2/5

    xdr_list_artifacts explicitly tells the agent to use its 'internal_id' with xdr_download_artifact, but no such tool exists in this set — the artifact workflow dead-ends after inspecting structure. There is also no way to perform response/containment actions or export search results, leaving the core lifecycle incomplete.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues